search

PlayPro / CoreProtect

CoreProtect is a blazing fast data logging and anti-griefing tool for Minecraft servers.
Artistic License 2.0
652 stars 327 forks source link

exploit: Co lookup action: command exclusion list #25

Closed DeusNinja closed 3 years ago

DeusNinja commented 3 years ago

Is there currently any way to create an exclusion list for the commands on the list not to be logged by co? The plugin is currently logging /login, /l and /register, /reg commands with user's passwords visible on the /co lookup action: login to find the cords of where the command was ran then again /co lookup action: command to see user's login password. javaw_KZbdBaZffJ

DeusNinja commented 3 years ago

I also created an issue for this on the authme reloaded github https://github.com/AuthMe/AuthMeReloaded/issues/2323

Intelli commented 3 years ago

Commands can be added to a blacklist.txt file to disable logging.

https://dev.bukkit.org/projects/coreprotect/pages/disable-logging-for-specific-users

DeusNinja commented 3 years ago

do you include the / in front of the commands on that blacklist? Also may you update that page to include instructions for this? It isn't very clear on how to block commands.